Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/K0hRbWFJQmWZaoTv77S8gCJ-CK0.roa
File: K0hRbWFJQmWZaoTv77S8gCJ-CK0.roa (raw, json)
Hash identifier: VcILn/2UkF27tz0gEv2dN93UmmkItNY38RdqXkMVdhI=
Subject key identifier: 2B:48:51:6D:61:49:42:65:99:6A:84:EF:EF:B4:BC:80:22:7E:08:AD
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183A16BE4E03901054893BC880EFB4C5023
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/K0hRbWFJQmWZaoTv77S8gCJ-CK0.roa
Signing time: Tue 04 Oct 2022 05:15:46 +0000
ROA not before: Tue 04 Oct 2022 05:15:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 45.149.185.0/24 maxlen: 24
193.151.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a1:6b:e4:e0:39:01:05:48:93:bc:88:0e:fb:4c:50:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 4 05:15:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b48516d61494265996a84efefb4bc80227e08ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:f3:f6:41:06:f7:9b:e9:f4:92:64:0f:b7:
cd:92:c8:9c:d0:9e:98:54:f8:52:6a:cc:e6:46:22:
06:c8:16:9e:5d:e1:54:c6:ae:f9:52:28:85:c6:73:
d0:e0:0d:8c:07:50:f2:b2:2f:cc:6e:48:ac:00:1e:
b5:95:d7:7f:6d:e1:21:4f:8e:f4:7f:49:d8:4a:56:
83:8b:6b:9d:c2:57:d6:c7:27:ee:2b:24:6c:47:4e:
f9:9e:88:1f:10:2f:49:99:3c:2a:36:ad:1f:c0:98:
b9:ef:c0:b0:15:e8:16:d0:1b:c8:cd:c7:27:c4:15:
f3:c7:49:a0:2d:17:08:db:29:e4:a9:22:14:96:9d:
54:4f:87:c0:87:13:93:c2:d7:93:6a:b8:98:de:a0:
b5:e5:23:40:13:71:55:f7:8f:97:cc:4c:b4:69:22:
b6:54:07:21:d9:96:48:26:d4:33:f4:9b:d2:ed:1a:
39:bb:81:ac:ed:13:b7:35:51:b8:81:ff:eb:f0:41:
49:41:82:f4:9d:2d:47:b5:83:e0:32:e6:9a:9e:ed:
49:03:47:f6:4e:c5:0d:24:f3:c7:c0:f7:a3:e1:98:
65:5e:9d:5b:ec:f3:f2:95:5e:4f:fa:0a:bb:82:7c:
2a:fb:72:d5:1e:bd:bd:34:6d:f6:74:17:48:0c:7b:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:48:51:6D:61:49:42:65:99:6A:84:EF:EF:B4:BC:80:22:7E:08:AD
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/K0hRbWFJQmWZaoTv77S8gCJ-CK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.185.0/24
193.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ac:31:9c:a8:17:18:e0:bb:77:2e:de:0a:3d:c4:d8:aa:7e:
70:c7:c1:3c:fc:c0:a0:92:ba:5c:0f:08:54:1c:d0:95:1c:13:
79:da:c1:e4:11:37:48:19:77:0f:8b:ef:fb:6f:ba:10:bd:70:
f9:72:fb:49:67:c7:18:83:7c:2b:c2:e4:77:25:09:e9:ec:33:
a0:39:d5:34:59:63:d2:17:d3:91:44:4e:25:c2:b0:02:88:c2:
bd:42:f3:0e:28:19:86:89:61:e1:95:1a:89:87:32:6e:4f:fb:
85:3f:bc:3a:1d:b7:29:79:05:34:4a:a0:c4:99:bb:ac:a9:35:
a2:4a:db:1a:ab:a2:1d:8c:e1:ca:8f:db:da:a3:66:13:a0:71:
cc:cc:4b:1b:3c:c3:66:77:e3:f2:28:ed:0e:3f:0b:5c:0c:51:
6b:1b:4e:02:e3:a2:ea:6d:d3:42:ab:3c:ac:03:46:e1:62:83:
51:20:21:e0:de:e0:be:6f:74:a2:f1:d0:eb:3e:c1:1d:65:2d:
64:55:c6:30:b5:42:90:48:81:14:2b:e5:3e:10:4b:b4:38:cb:
86:56:73:14:7f:b4:42:a5:98:5b:fb:5a:b3:1b:98:73:5e:dc:
d1:b6:55:83:84:f8:63:e5:49:21:35:9b:5e:1e:a8:16:71:3f:
e7:5c:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org